Shunra Network Virtualization for Hewlett-Packard toServerObject() Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Network Visualization. Authentication is not required to exploit this vulnerability. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: The specific flaw exists...

CVE-2014-2626: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024...

PT-2014-4830

Name of the Vulnerable Software and Affected Versions Shunra Network Virtualization version 8.6 Description A directory traversal issue in the toServerObject function allows remote attackers to create files and execute arbitrary code via crafted input. Recommendations For version 8.6, consider...